PRIVACY POLICY FOR KNAUF MALAYSIA AND SINGAPORE RECRUITMENT PORTAL
We, Knauf Sdn. Bhd. / Knauf Singapore Pte. Ltd. (“Knauf Malaysia”, “Knauf Singapore”, “Controller”, “we”, “us”) engage an external service provider for handling our recruitments and simplifying the hiring process ("Service") in the Asia Pacific region. It is important that you (“User”) feel safe using the Service and are informed about how we handle User's personal data in the recruitment process. We strive to maintain the highest possible standard regarding the protection of personal data. We process, manage, use, and protect User's Personal Data in accordance with this Privacy Policy ("Privacy Policy").
1. General
We are the controller in accordance with current privacy legislations. The User’s personal data is processed with the purpose of managing and facilitating recruitment of employees to our business.
2. Collection of personal data
We are responsible for the processing of the personal data that the User contributes to the Service, or for the personal data that we in other ways collect with regards to the Service.
When and how we collect personal data
We collect personal data about Users from User when User;
- makes an application through the Service or otherwise;
- adds personal data either personally or by using a third-party source such as Facebook or LinkedIn;
- uses the Service to connect with our staff; or
- provides identifiable data in a chat platform (provided through the website that uses the Service) and such data is relevant to the recruitment application.
We collect data from third parties, such as Facebook, LinkedIn and through other public sources. This is referred to as “Sourcing” and can either be manually performed by our employees or automatically through the Service.
In some cases, our existing employees can make recommendations about potential applicants. Such employees will add personal data about such potential applicants. In such cases, the potential applicant is considered a User in the context of this Privacy Policy and will be informed about the processing.
The types of personal data collected and processed
The categories of personal data that can be collected through the Service can be used to identify natural persons from names, e-mails, pictures and videos, information from Facebook and LinkedIn accounts, answers to questions asked during the recruitment process, titles, education and other information that the User or others have provided through the Service. Only data that is relevant for the recruitment process is collected and processed.
Purpose and lawfulness of processing
The purpose of the collecting and processing personal data is to manage recruitment. We strive to ensure that the process complies to the legal framework while simplifying and facilitating the recruitment process.
Personal data that is processed with the purpose of aggregated analysis or market research is always made unidentifiable. Such personal data cannot be used to identify a certain User. Thus, such data is not considered personal data.
The consent of the data subject
The User hereby consents to the processing of personal data for the purpose of Controller’s handling the recruitment process. The User also consents that personal data is collected through the Service, when User:
- makes an application through the Service,
- adds personal data either personally or by using a third-party source as Facebook or LinkedIn, and that Controller may use external sourcing tools to add that additional information; and
- uses the Service to connect to Controller’s recruitment department.
The User also consents to the Controller collecting and compiling publicly available information about the User for use in recruitment purposes.
The User consents to the personal data collected above will be processed in accordance to “Storage and Transfers” and “How Long Personal Data Will Be Processed” sections below.
User has the right to withdraw the consent at any time by contacting Controller as set out in Section 9. Invoking this right may however mean that the User cannot apply for a job or otherwise use the Service.
Storage and Transfers
Personal data collected through the Service may be (a) stored, processed and accessed from within the European Union (EU) or European Economic Area (EEA) or any country that is considered by the European Commission to have an adequate level of protection, or (b) processed by suppliers that have entered into a binding agreements that complies with the lawfulness of third country transfers (as Privacy Shield) or to other suppliers where the adequate safeguards are in place in order to protect the rights of the data subjects whose data is being transferred. To obtain documentation regarding such adequate safeguards, please contact us as set out in Section 9.
How long personal data will be processed
Unless User objects to the processing of personal data, personal data will be stored and processed for period we deem necessary for the purpose(s) stated above. We note User may be interested for consideration of future recruitment. Therefore, we may store User’s personal data until we deem such to be no longer of value for future recruitment. If you wish not to have your personal data processed for future recruitment, please contact us as set out under Section 9.
3. Users’ rights
User has the right to request information about the personal data processed by us by notifying in writing as set out in Section 9 below. User has the right to request a copy of the processed personal data once without any charge. For further request, Controller has the right to charge a reasonable administrative fee.
User has the right to request for rectification of inaccurate personal data by contacting us as set out in Section 9.
User has the right to demand for deletion or reasonable restriction of processing personal data, and the right to object to processing based on legitimate interest under reasonable circumstances.
User has the right to revoke any consent to processing that has been given by User to Controller. Invoking this right may however mean that User cannot apply for a specific job or otherwise use the Service.
User has, under certain circumstances, right to data portability which means right to obtain and transfer the personal data to another controller so long as that does not negatively affect the rights and freedoms of others.
User has the right to lodge a complaint to the supervisory authority regarding the processing of personal data if the User considers that the processing of personal data infringes the framework of privacy law.
4. Security
We prioritize personal integrity and work actively so that personal data of Users is processed with utmost care. We take measures that can be reasonably expected to ensure personal data is processed safely and in accordance to this Privacy Policy and prevailing regulations.
However, transfer of information over the internet and mobile networks entails risk. It is important that Users exercise caution to ensure their data is protected. Users are responsible to keep login information secured.
5. Transfer of personal data to third party
We will not sell or otherwise transfer Users’ personal data to third parties.
We may however transfer Users’ personal data to:
- our contractors and sub-contractors acting as our Processors and Sub-Processors in accordance with our instructions for the provision of the Service;
- authorities in criminal cases or when illegal behaviour is suspected; and
- authorities if required by law or court.
We will only transfer Users’ personal data to third parties that we have confidence in. We carefully choose partners to ensure that the User’s personal data is processed in accordance to current privacy legislations. We cooperate with the following categories of processors of personal data; the provider of Service, server and hosting companies, e-mail reference companies, video processing companies, information-sourcing companies, analytical service companies and other companies related to the supply of Service.
6. Aggregated data (non-identifiable personal data)
We may share aggregated data with third parties. Aggregated data is compiled from information that has been collected through the Service and can, for example, consist of statistics of internet traffic or the geographical location when using the Service. Aggregated data does not contain any information that can be used to identify individual persons and therefore is not personal data per se.
7. Cookies
When Users use the Service, information about the usage may be stored as cookies. Cookies are passive text files that are stored in the internet browser on the User’s device using the Service such as computer, mobile phone or tablet. We use cookies to improve the User’s experience and to gather statistics information relating to using the Service. This is done to secure, maintain and improve the Service. Information collected through the cookies can in some instances be personal data and is, in such instances, regulated by our Cookie Policy.
Users can at any time disable the use of cookies by changing the local settings in their devices. Disabling cookies can affect the experience using the Service when, for example, certain functions in the Service are disabled.
8. Changes
We have the right to, at any time, make changes to the Privacy Policy. The latest version of the Privacy Policy will always be available online in the portal hosting the Service. A new version is considered communicated to User when User has either received an email informing the User of the new version (using the email provided by the User) or when the User is otherwise informed of the new Privacy Policy.
9. Contact
For questions, further information on how we handle personal data and other matters, please contact your Knauf representative.
